[Webkit-unassigned] [Bug 139048] New: ASSERTION FAILED: !characters.isEmpty() in WebCore::HTMLTreeBuilder::processFakeCharacters

Tue Nov 25 09:37:52 PST 2014

https://bugs.webkit.org/show_bug.cgi?id=139048

            Bug ID: 139048
           Summary: ASSERTION FAILED: !characters.isEmpty() in
                    WebCore::HTMLTreeBuilder::processFakeCharacters
    Classification: Unclassified
           Product: WebKit
           Version: 528+ (Nightly build)
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebCore Misc.
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: rhodovan.u-szeged at partner.samsung.com
                CC: cdumez at apple.com, darin at apple.com
            Blocks: 116980

Created attachment 242200
  --> https://bugs.webkit.org/attachment.cgi?id=242200&action=review
Test case

Load this test with debug WebKit:

<!DOCTYPE html>
<isindex prompt="">

Backtrace:

ASSERTION FAILED: !characters.isEmpty()
../../Source/WebCore/html/parser/HTMLTreeBuilder.cpp(440) : void WebCore::HTMLTreeBuilder::processFakeCharacters(const WTF::String&)

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7fff98c4e700 (LWP 8638)]
0x00007fffedc7ea89 in WTFCrash () at ../../Source/WTF/wtf/Assertions.cpp:321
321        *(int *)(uintptr_t)0xbbadbeef = 0;
#0  0x00007fffedc7ea89 in WTFCrash () at ../../Source/WTF/wtf/Assertions.cpp:321
#1  0x00007ffff346afed in WebCore::HTMLTreeBuilder::processFakeCharacters (this=0x64dd80, characters=...) at ../../Source/WebCore/html/parser/HTMLTreeBuilder.cpp:440
#2  0x00007ffff346b4f9 in WebCore::HTMLTreeBuilder::processIsindexStartTagForInBody (this=0x64dd80, token=0x7fffffffd040) at ../../Source/WebCore/html/parser/HTMLTreeBuilder.cpp:482
#3  0x00007ffff346d4a2 in WebCore::HTMLTreeBuilder::processStartTagForInBody (this=0x64dd80, token=0x7fffffffd040) at ../../Source/WebCore/html/parser/HTMLTreeBuilder.cpp:823
#4  0x00007ffff346f103 in WebCore::HTMLTreeBuilder::processStartTag (this=0x64dd80, token=0x7fffffffd040) at ../../Source/WebCore/html/parser/HTMLTreeBuilder.cpp:1156
#5  0x00007ffff346ad26 in WebCore::HTMLTreeBuilder::processToken (this=0x64dd80, token=0x7fffffffd040) at ../../Source/WebCore/html/parser/HTMLTreeBuilder.cpp:383
#6  0x00007ffff346ab58 in WebCore::HTMLTreeBuilder::constructTree (this=0x64dd80, token=0x7fffffffd040) at ../../Source/WebCore/html/parser/HTMLTreeBuilder.cpp:355
#7  0x00007ffff3442d4f in WebCore::HTMLDocumentParser::constructTreeFromHTMLToken (this=0x589340, rawToken=...) at ../../Source/WebCore/html/parser/HTMLDocumentParser.cpp:352
#8  0x00007ffff3442985 in WebCore::HTMLDocumentParser::pumpTokenizer (this=0x589340, mode=WebCore::HTMLDocumentParser::AllowYield) at ../../Source/WebCore/html/parser/HTMLDocumentParser.cpp:309
#9  0x00007ffff344211d in WebCore::HTMLDocumentParser::pumpTokenizerIfPossible (this=0x589340, mode=WebCore::HTMLDocumentParser::AllowYield) at ../../Source/WebCore/html/parser/HTMLDocumentParser.cpp:189
#10 0x00007ffff34432e5 in WebCore::HTMLDocumentParser::append (this=0x589340, inputSource=...) at ../../Source/WebCore/html/parser/HTMLDocumentParser.cpp:428
#11 0x00007ffff30cee21 in WebCore::DecodedDataDocumentParser::flush (this=0x589340, writer=...) at ../../Source/WebCore/dom/DecodedDataDocumentParser.cpp:60
#12 0x00007ffff35ad1bf in WebCore::DocumentWriter::end (this=0x589790) at ../../Source/WebCore/loader/DocumentWriter.cpp:243
#13 0x00007ffff3598f55 in WebCore::DocumentLoader::finishedLoading (this=0x5896f0, finishTime=0) at ../../Source/WebCore/loader/DocumentLoader.cpp:440
#14 0x00007ffff3598cbe in WebCore::DocumentLoader::notifyFinished (this=0x5896f0, resource=0x5a80b0) at ../../Source/WebCore/loader/DocumentLoader.cpp:374
#15 0x00007ffff364974c in WebCore::CachedResource::checkNotify (this=0x5a80b0) at ../../Source/WebCore/loader/cache/CachedResource.cpp:293
#16 0x00007ffff364984a in WebCore::CachedResource::finishLoading (this=0x5a80b0) at ../../Source/WebCore/loader/cache/CachedResource.cpp:309
#17 0x00007ffff3645f3f in WebCore::CachedRawResource::finishLoading (this=0x5a80b0, data=0x906c60) at ../../Source/WebCore/loader/cache/CachedRawResource.cpp:104
#18 0x00007ffff35f9c5a in WebCore::SubresourceLoader::didFinishLoading (this=0x5a4d40, finishTime=0) at ../../Source/WebCore/loader/SubresourceLoader.cpp:307
#19 0x00007ffff35f5a3f in WebCore::ResourceLoader::didFinishLoading (this=0x5a4d40, finishTime=0) at ../../Source/WebCore/loader/ResourceLoader.cpp:502
#20 0x00007ffff3f9e209 in WebCore::readCallback (asyncResult=0x6a91d0, data=0x5a5250) at ../../Source/WebCore/platform/network/soup/ResourceHandleSoup.cpp:1300
#21 0x00007fffeb8997d6 in async_ready_callback_wrapper (source_object=0x7c66d0, res=0x6a91d0, user_data=user_data at entry=0x5a5250) at ginputstream.c:523
#22 0x00007fffeb8bf0d5 in g_task_return_now (task=0x6a91d0) at gtask.c:1077
#23 0x00007fffeb8bf0f9 in complete_in_idle_cb (task=0x6a91d0) at gtask.c:1086
#24 0x00007fffeaafea2d in g_main_dispatch (context=0x478020) at gmain.c:3064
#25 g_main_context_dispatch (context=context at entry=0x478020) at gmain.c:3663
#26 0x00007fffeaafed98 in g_main_context_iterate (context=0x478020, block=block at entry=1, dispatch=dispatch at entry=1, self=<optimized out>) at gmain.c:3734
#27 0x00007fffeaaff05a in g_main_loop_run (loop=0x9015f0) at gmain.c:3928
#28 0x00007ffff464b42e in WTF::RunLoop::run () at ../../Source/WTF/wtf/gtk/RunLoopGtk.cpp:59
#29 0x00007ffff2bb8250 in WebKit::ChildProcessMain<WebKit::WebProcess, WebKit::WebProcessMain> (argc=2, argv=0x7fffffffd968) at ../../Source/WebKit2/Shared/unix/ChildProcessMain.h:61
#30 0x00007ffff2bb80b5 in WebKit::WebProcessMainUnix (argc=2, argv=0x7fffffffd968) at ../../Source/WebKit2/WebProcess/gtk/WebProcessMainGtk.cpp:73
#31 0x0000000000400891 in main (argc=2, argv=0x7fffffffd968) at ../../Source/WebKit2/WebProcess/EntryPoint/unix/WebProcessMain.cpp:44

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20141125/41432969/attachment-0002.html>